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Amendment tn the Claims 

Please amend the claims as follows: 

1 . (Currently amended) A method for configuring a semiconductor chip having ah 
associated serial n^mfrefr the method comprising: 

selecting a private cryptographic key; 

selecting a public cryptographic key, wherein the public cryptographic key and 
the private cryptographic key are not related by a cryptographic key pair relationship; and 

embedding the private cryptographic key. e»4 the public cryptographic ke y, and 
the serial number in a read-only memory on the semiconductor chip. 

2. (Original) The method of claim 1 wherein the semiconductor chip provides 
interface processing at a client. 

3. (Cancelled) 

4. (Currently amended) The method of claim I [[3]] further comprising: 
storing the public cryptographic key in a database in association with the serial 

number. 

5. (Original) The method of claim 1 wherein the private cryptographic key, and the 
public cryptographic key in the read-only memory are inaccessible to an input/output connection 
of the semiconductor chip. 
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6. (Original) An article of manufacture comprising: 

a first read-only memory structure containing an embedded private cryptographic key; 

and 

a second read-only memory structure containing an embedded public- 
cryptographic key, wherein the public cryptographic key and the private cryptographic key are 
not related by a cryptographic key pair relationship. 

7. (Original) The article of manufacture of claim 6 wherein the article of 
manufacture is a semiconductor chip. 

8. (Original) The article of manufacture of claim 7 wherein the semiconductor chip 
is capable of providing interface processing at a client. 

9. (Original) The article of manufacture of claim 8 wherein the first read-only 
memory structure and the second read-only memory structure are contained within a 
cryptographic unit of a CPU chip. 
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1 0. (Currently amended) A method for secure communication between a client and a 
server in a data processing system, the method comprising: 

generating a client message at the cliem; 

retrieving an embedded server public key from a read-only memory structure in 
an article of manufacture in the clien t, the read-only memory structure having an emhedde4 
client private kev. the embedded server public key and the embedded client private key not being 
related by a cryptographic fcey p^r relatiQPShip. fog gmfredd^ pfreifl p^yq^ toy being 
associated with a client public kev stored exclusively outside the client : 

encrypting the client message with the embedded server public key; and 

sending the client message to the server. 

1 1 . (Currently amended) The method of claim 1 0 further comprising: 
retrieving client authentication data; 

retrieving ibe [[an]] embedded client private key from a read-only memory 
structure in an article of manufacture in the client; 

encrypting the client authentication data with the embedded client private key; 

and 

storing the encrypted client authentication data in the client message, 

12. (Original) The method of claim 1 1 further comprising: 

retrieving an embedded client serial number from a read-only memory structure in 
an article of manufacture in the client; and 

storing a copy of the embedded client serial number in the client message. 
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13. (Currently amended) An apparatus for secure communication between a client 
and a server in a data processing system, the apparatus comprising: 
means for generating a client message at the client; 

means for retrieving an embedded server public key from a read-only memory 
structure in an article of manufacture in the clien t- the read-only memory structure having an 
embedded client private key, the embedded server public key and the embedded client private 
kev not being related bv a cryptographic kev pair relationship, the embedded client private kev 
being associated with a client public key stored exclusively outside the client ; 

means for encrypting the client message with the embedded server public key; 



and 



means for sending the client message to the server. 



14. (Currently amended) The apparatus of claim 1 3 further comprising: 
means for retrieving client authentication data; 

means for retrieving the [[an]] embedded client private key from a read-only 
memory structure in an article of manufacture in the client; 

means for encrypting the client authentication data with the embedded client 
private key; and 

means for storing the encrypted client authentication data in the client message. 

15. (Original) The apparatus of claim 14 further comprising: 

means for retrieving an embedded client serial number from a read-only memory 
structure in an article of manufacture in the client; and 

means for storing a copy of the embedded client serial number in the client 

message. 
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1 6. (Cunemly amended) A computer program product in a computer-readable 
medium for use in a data processing system for secure communication between a client and a 
server, the computer program product comprising: 

instructions for generating a client message at the client; 

instructions for retrieving an embedded server public key from a read-only 
memory structure in an article of manufacture in the clieni. ihe read-only mepaoiy structure 
having an embedded client private key, the embedded server public key and the embedded client 
private key not being related bv a ciypfogrgphic key pair re lationship, the embedded client 
private key being associated with a client public key stored exclusively outside the client ; 

instructions for encrypting the client message with the embedded server public 
key; and instructions for sending the client message to the server. 

1 7. (Currently amended) The computer program product of claim 16 further 
comprising: 

instructions for retrieving client authentication data; 

instructions for retrieving the [[an]] embedded client private key from a read-only 
memory structure in an article of manufacture in the client; 

instructions for encrypting the client authentication data with the embedded client 
private key; and 

instructions for storing the encrypted client authentication data in the client 

message. 

1 8. (Original) The computer program product of claim 1 7 further comprising: 
instructions for retrieving an embedded client serial number from a read-only 

memory structure in an article of manufacture in the client and 

instructions for storing a copy of the embedded client serial number in the client 

message. 
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19. (Currently amended) A method for secure communication between a client and a 
server in a data processing system, the method comprising: 

generating a server message at the server; 

retrieving information that was requested by the client; 

storing the retrieved information in the server message; 

retrieving a client public key, wherein the client public key corresponds to an 
embedded client private key in a read-only memory structure in an article of manufacture in the 
clien t, and the client public key is stored exclusively outside the client : 

encrypting the server message with the client public key; and 

sending the server message to the client. 

20. (Currently amended) The method of claim 19 [[16]] further comprising: 
retrieving server authentication data; 

retrieving a server private key ; 

encrypting the server authentication data with the server private key; and 
storing the encrypted server authentication data in the server message. 
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2 1 . (Currently amended) An apparatus for secure communication between a client 
and a server in a data processing system, the apparatus comprising: 

means for generating a server message at the server. 

means for retrieving information that was requested by the client; 

means for storing the retrieved information in The server message; 

means for retrieving a client public key, wherein the client public key corresponds 
to an embedded client private key in a read-only memory structure in an article of m a n u fa cture in 
the clien t, and the diem public key is stored exclusively outside the client : 

means for encrypting the server message with the client public key; and 

means for sending the server message to the client 



22. (Original) The apparatus of claim 2 1 Anther comprising: 
means for retrieving server authentication data; 
means for retrieving a server private key; 

means for encrypting the server authentication data with the server private key; 

and 

means for storing the encrypted server authentication data in the server message. 
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23. (Currently amended) A computer program product in a computer-readable 
medium for use in a data processing system for secure communication between a client and a 
server, the computer program product comprising: 

instructions for generating a server message at the server, 

instructions for retrieving information that was requested by the client; 

instructions for storing the retrieved information in the server message; 

instructions for retrieving a client public key, wherein the client public key 
corresponds to an embedded client private key in a read-only memory structure in an article of 
manufacture in the clien t, and the client public key is stored exclusively outside the client : 

instructions for encrypting the server message with the client public key; and 

instructions for sending the server message to the client. 



24. (Original) The computer program product of claim 23 further comprising: 
instructions for retrieving server authentication data; 
instructions fox retrieving a server private key; 

instructions for encrypting the server authentication data with the server private 

key; and 

instructions for storing the encrypted server authentication data in the server 

message. 
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25. (Currently amended) A method for secure communication between a client and a 
server in a data processing system, the method comprising: 

receiving a client message from the client; 
retrieving a server private key; 

decrypting the client message with the server private key; 
retrieving a client serial number from the decrypted client message; and 
retrieving a client public key that is associatively stored with the retrieved client 
serial number, wherein the client public key corresponds 10 an embedded client private key in a 
read-only memory structure in an article of manufacture in the clien t and is storefl exclusively 
outside the client: 

wherein the read-only memory structure has an embedded server public key, the 
embedded server public key and die embedded client private key not being related by a 
cr yptographic key pair relationship . 

26. (Original) The method of claim 25 further comprising: 

retrieving encrypted client authentication data from the client message; 
decrypting the client authentication data with the retrieved client public key; and 
verifying the decrypted client authentication data. 
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27. (Currently amended) An apparatus for secure communication between a client 
and a server in a data processing system, the apparatus comprising: 

means for receiving a client message from the client; 
means for retrieving a server private key; 

means for decrypting the client message with the server private key; 

means for retrieving a client serial number from the decrypted cliept message; and 

means for retrieving a client public key that is associatively stored with the 
retrieved client serial number, wherein the client public key corresponds to an embedded client 
private key in a read-only memory structure in an article of manufacture in the client and is 
stored exclusively outside the client: 

wherein the read-only memory structure has an embedded server public key, the 
embedded server public kev and the embedded client private kev not b eing related by a 
cryptographic key pair relationship , 

28. (Original) The apparatus of claim 27 further comprising: 

means tor retrieving encrypted client authentication data from the plient message; 
means for decrypting the client authentication data with the retrieved client public 

key; and 

means for verifying the decrypted client authentication data. 
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29. (Currently amended) A computer program product in a computer-readable 
medium for use in a data processing system for secure communication between a client and a 
server, the computer program product comprising: 

instructions for receiving a client message from the diem; 
instructions for retrieving a server private key; 

instructions for decrypting the client message with the server private key; 
instructions for retrieving a client serial number from the decrypted client 

message; and 

instructions for retrieving a client public key that is associatively stored with the 
retrieved client serial number, wherein the client public key corresponds to an embedded client 
private key in a read-only memory structure in an article of manufacture in the client and is 
stored exclusively outside the client: 

wherein the read-only memory smicrure has an embedded server public kev. the 
embedded server public key and the embedded client private key not being related by a 
cryp to graphic key pair relationship . 

30. (Original) The computer program product of claim 29 further comprising: 
instructions for retrieving encrypted client authentication data from the client 

message; 

instructions for decrypting the client authentication data with the retrieved client 
public key; and 

instructions for verifying the decrypted client authentication data. 
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3 1 . (Currently amended) A method for secure communication between a client and a 
server in a data processing system, the method comprising: 

receiving a server message from the server; 

retrieving an embedded client private key from a read-only memory structure in 
an article of manufacture in the client, the embedded client private kev being associated with a 
client public key stored exclusively outside the client : and 

decrypting the server message with the embedded client private key. 

32. (Original) The method of claim 3 1 further comprising: 

retrieving encrypted server authentication data from the server message; 
retrieving an embedded server public key from a read-only memory structure in an article 
of manufacture in the client; and 

decrypting the server authentication data with the embedded server public key; 

and 

verifying the decrypted server authentication data. 

33. (Original) The method of claim 32 further comprising: 
retrieving requested information from the server message; and 

in response to a determination that the decrypted server auxhenuc won data was 
verified, processing the requested information- 
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34. (Currently amended) An apparaius for secure communication between a client 
and a server in a data processing system, the apparatus comprising: 

means for receiving a server message from the server; 

means for retrieving an embedded client private key from a read-only memory 
structure in an article of manufacture in the clien t, the embedded cl ient private key being 
associated with a client public key stored exclusively outside the diem ; and 

means for decrypting the server message with the embedded client private key. 

35. (Original) The apparatus of claim 34 further comprising: 

means for retrieving encrypted server authentication data from the server 

message; 

means for retrieving an embedded server public key from a read-only memory 
structure in an article of manufacture in the client; and 

means for decrypting the server authentication data with the embedded server 
public key; and 

means for verifying the decrypted server authentication data. 

36. (Original) The apparatus of claim 35 further comprising: 

means for retrieving requested information from the server message; and 
means for processing the requested information in response to a determination 
that the decrypted server authentication data was verified. 
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37. (Currently amended) A computer program product in a computer-readable 
medium for use in a data processing system for secure communication between a client and a 
server, the computer program product comprising: 

instructions for receiving a server message from the server; 

instructions for retrieving an embedded client private key from a read-only 
memory structure in an article of manufacture in the clien t, the embedded client private key 
being associated with a client public kev stored exclusively outside the client : and 

instructions for decrypting the server message with the embedded client private 

key. 

38. (Original) The computer program product of claim 37 further comprising: 
instructions for retrieving encrypted server authentication data from the server 

message; 

instructions for retrieving an embedded server public key from a read-only 
memory structure in an article of manufacture in the client; and 

instructions for decrypting the server authentication data with the embedded 
server public key; and 

instructions for verifying the decrypted server authentication data. 

39. (Original) The computer program product of claim 38 further comprising: 
instructions for retrieving requested information from the server message; and 
instructions for processing the requested information in response to a 

determination that the decrypted server authentication data was verified. 
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